This policy explains how personal data is processed on www.menorcarent.com, when you request information and when you book or hire a vehicle. Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on personal data protection and digital rights (LOPDGDD) apply.
1. Data controller
EASYMENORCARENT RENT, S.L. (Menorcarent)
Tax identification number: B57134082.
Address: C/ Santa Victoria, 33, 07701 Mahón, Menorca, Illes Balears, Spain.
Contact for privacy matters and exercising your rights: [email protected]. You may also contact [email protected] or write to the address above.
2. MyBooking: booking platform and data processor
Menorcarent uses MyBooking to manage bookings and the customer, driver and contract data entered into that platform, including documents submitted through the booking area and payment management information.
The provider is KARYASALA SLU (MyBooking), tax identification number B02838894, at Avda. des Campverd, P37-46, 07730 Alaior, Illes Balears, Spain. Contact: [email protected]; telephone +34 637 70 13 74.
For our customers’ data managed on the platform, MyBooking acts as a data processor on behalf of Menorcarent. Its role covers the processing needed to provide the contracted technology service, following the controller’s instructions. This role does not make MyBooking responsible for the vehicle hire or replace Menorcarent as data controller. Requests concerning booking data should be addressed to Menorcarent, which will coordinate any necessary action with MyBooking.
3. Data processed and its source
Depending on the service requested, we process identification and contact details; driver and driving licence details; documents needed to verify identity and hire requirements; signatures and contract information; dates, vehicle, collection and return details; invoicing, payment status and transaction references; and communications or information about incidents and complaints. Browsing may generate technical data, such as IP addresses and security logs.
Data comes from you, your communications and your use of forms and the booking area. If someone else makes the booking, data may come from that person, including additional drivers’ details. Provide only relevant, accurate and up-to-date data, and inform the people whose data you supply.
4. Purposes and legal bases
- Enquiries, quotations, bookings and vehicle hire: responding to requests, checking driving requirements, concluding the contract, managing payments, collection, returns and service communications. Legal basis: steps requested before entering into a contract and performance of the contract (Article 6(1)(b) GDPR).
- Legal obligations: invoicing, accounting, tax obligations, and recording and reporting data required by vehicle hire legislation, including Spanish Royal Decree 933/2021. Legal basis: compliance with legal obligations (Article 6(1)(c) GDPR).
- Security and protecting rights: preventing misuse and fraud, managing incidents, and establishing or defending claims. Legal basis: Menorcarent’s legitimate interest in protecting its services and rights, balanced against data subjects’ rights (Article 6(1)(f) GDPR).
- Marketing communications: with your consent or, where permitted by Spain’s LSSI, concerning our own services similar to those previously purchased. You may withdraw consent or object at any time without affecting the hire.
Data necessary to enter into the contract or comply with legal obligations is mandatory: without it, we may be unable to process the booking or provide the service. Optional data and marketing consent are not conditions of vehicle hire.
5. Recipients and service providers
In addition to MyBooking, necessary web hosting, maintenance, communications and professional advisory providers may access data to the extent required by their services and subject to the applicable data protection obligations. Necessary data may be disclosed to financial institutions and payment providers to manage transactions, to insurers where an incident requires it, and to public bodies, authorities or courts where legally required or necessary to handle a claim. Personal data is not sold.
6. Payments and documents
Use the designated payment gateway for card payments and the booking area for requested documents. Do not enter full card numbers, CVV codes, passwords or unnecessary information in notes, enquiry forms or conversations with the website assistant. Booking management may include amounts, payment status and transaction references or receipts.
7. Retention periods
Booking and contract data is retained throughout the contractual relationship and subsequently for the applicable statutory periods and limitation periods for liabilities. Business and accounting documents are retained for six years from the last accounting entry, subject to any other legally applicable periods. Data in the electronic register required by Royal Decree 933/2021 is retained for three years after the service ends.
Enquiries that do not lead to a contract are retained for the time needed to answer them and manage any resulting liabilities. Marketing data is used until you withdraw consent or object; where appropriate, the minimum information needed to respect that decision is retained. Identity documents should not be kept longer than necessary for their purpose. At the end of the applicable periods, data should be erased or, where legally required, blocked.
8. Technology services and international transfers
The use of communications, browsing or assistance technology services may involve processing outside the European Economic Area. Where an international transfer occurs, it must be covered by an adequacy decision or by the safeguards and conditions provided for in the GDPR. You may request information about the providers involved, data destinations and safeguards applicable to your data by emailing [email protected].
9. Your rights
You may request access, rectification, erasure and portability of your data, restriction of processing and object to processing in the circumstances provided for by the GDPR. You may withdraw consent at any time without affecting the lawfulness of earlier processing. To exercise your rights, email [email protected] or write to the address above, specifying your request. Additional information to verify your identity will be requested only where necessary.
If you believe that processing infringes your rights, you may lodge a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.
10. Cookies, website enquiries and security
Cookies and browsing technologies are described in the Cookie Policy. Where a technology requires consent, that consent must be obtained specifically. Reading this policy does not constitute consent to advertising or optional cookies.
If you use the forms or website assistant, the content of your enquiries will be processed to respond to them. Avoid providing sensitive data or documents that have not been requested. Security measures must reflect the nature of the data and processing risks; no platform can guarantee zero risk.
11. Updates
This policy may be updated to reflect changes in services or legislation. You may request clarification about any section at [email protected].